** Changed in: poppler (Ubuntu)
Importance: Undecided => Low
** Changed in: poppler (Ubuntu)
Status: New => Triaged
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to poppler in Ubuntu.
https://bugs.launchpad.net/bugs/1857902
Title:
Thread-safety bugs in package libpoppler-glib8
Status in poppler package in Ubuntu:
Triaged
Bug description:
There are these bugs in libpoppler-glib8:
https://gitlab.freedesktop.org/poppler/poppler/issues/845
https://gitlab.freedesktop.org/poppler/poppler/issues/846
The first is about sharing cairo_font_face_t instances in multiple
threads which is not thread-safe. The second is about accessing global
linked list struct without proper synchronisation mechanism.
Due to these two bugs poppler+cairo cannot be used for rendering
multiple documents in multiple threads.
The second may be potentially security vulnerability for applications
that use poppler+cairo in multiple threads due to writes to
potentially uninitialised pointer.
I noticed that poppler source package contains a lot of patches from
ubuntu updates. Would be possible to add patch to this problem to
ubuntu (and also debian) updates?
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/1857902/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
